Vulnerabilities in itsourcecode

661 results
Vexday analysis

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2025-4488MEDIUMitsourcecode Gym Management System ajax.php sql injectionEPSS 0.5%CVE-2024-10738MEDIUMitsourcecode Farm Management System manage-breed.php sql injectionEPSS 0.5%CVE-2024-6193MEDIUMitsourcecode Vehicle Management System driverprofile.php sql injectionEPSS 0.5%CVE-2024-7194MEDIUMitsourcecode Society Management System check_student.php sql injectionEPSS 0.5%CVE-2025-9470MEDIUMitsourcecode Apartment Management System add_m_committee.php sql injectionEPSS 0.5%CVE-2025-9468MEDIUMitsourcecode Apartment Management System add_bill.php sql injectionEPSS 0.5%CVE-2025-10667MEDIUMitsourcecode Online Discussion Forum compose_msg.php sql injectionEPSS 0.5%CVE-2025-9767MEDIUMitsourcecode Sports Management System sporttype.php sql injectionEPSS 0.5%CVE-2025-9469MEDIUMitsourcecode Apartment Management System add_fund.php sql injectionEPSS 0.5%CVE-2025-9471MEDIUMitsourcecode Apartment Management System add_maintenance_cost.php sql injectionEPSS 0.5%CVE-2025-10118MEDIUMitsourcecode E-Logbook with Health Monitoring System for COVID-19 login.php sql injectionEPSS 0.5%CVE-2024-6803MEDIUMitsourcecode Document Management System insert.php sql injectionEPSS 0.5%CVE-2024-6016MEDIUMitsourcecode Online Laundry Management System admin_class.php sql injectionEPSS 0.5%CVE-2024-7944MEDIUMitsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted uploadEPSS 0.5%CVE-2024-8171MEDIUMitsourcecode Tailoring Management System staffcatedit.php sql injectionEPSS 0.5%CVE-2024-12785MEDIUMitsourcecode Vehicle Management System sendmail.php sql injectionEPSS 0.5%CVE-2025-4311MEDIUMitsourcecode Content Management System update_main_topic_img.php sql injectionEPSS 0.5%CVE-2025-4363MEDIUMitsourcecode Gym Management System ajax.php sql injectionEPSS 0.5%CVE-2024-7455MEDIUMitsourcecode Tailoring Management System partedit.php sql injectionEPSS 0.5%CVE-2025-4300MEDIUMitsourcecode Content Management System search_list.php sql injectionEPSS 0.5%